Category - API Security Blog

Hemi VDP: Linkedin Broken Link Hijacking on https://hemi.xyz/about

The LinkedIn account link for a team member on the https://hemi.xyz/about page pointed to a non-existent LinkedIn...Read More ...

February 27, 2025

Hemi VDP: Broken X (Twitter) link on hemi.xyz/about

Vulnerability description not...Read More ...

February 27, 2025

valuenews.com Open Redirect vulnerability OBB-4027453

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

santinicycling.com Improper Access Control vulnerability OBB-4027540

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

oak-valley.deptfordschools.org Cross Site Scripting vulnerability OBB-4030594

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

curl: (“possible”) UAF

Vulnerability description not...Read More ...

February 27, 2025

decembergirl.net Cross Site Scripting vulnerability OBB-4027589

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025

mesfm.umc.com Cross Site Scripting vulnerability OBB-4024480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified th ...

February 27, 2025